這2個網站是不是有木馬?



贊助商連結


cjhorng
2007-07-03, 05:47 PM
這2個網站是不是有木馬?
AntiVir一直跳出警告(Virus definition file:V6.39.00.78)
我也選擇隔離檔案然後刪除,這樣還會中毒嗎?


udn 聯合追星網
http://stars.udn.com/

花蝶租書店家留言版
http://www.starfly-girl.com.tw/starfly/map_001forum.asp?Store_id=TW090042&GbookID=17749

贊助商連結


Roger
2007-07-03, 06:09 PM
可以把在隔離區的感染檔案上傳嗎?

剛進去,紅傘高啟發沒叫!

cjhorng
2007-07-03, 06:32 PM
可以把在隔離區的感染檔案上傳嗎?

剛進去,紅傘高啟發沒叫!
AntiVir的隔離區目錄叫什麼?

我不知道方法對不對
我把檔案從隔離區restore到指定目錄再壓縮上傳

Roger
2007-07-03, 09:06 PM
Main[1].js

//var shida_top,timer;
//function shida_stop() {timer=setInterval("shida_scrollwindow()",1);}
//function shida_start(){clearInterval(timer);}
//function shida_scrollwindow() {shida_top=document.body.scrollTop; window.scroll(0,++shida_top);
//if (shida_top != document.body.scrollTop) shida_start();}
//document.onmousedown=shida_start;
//document.ondblclick=shida_stop;
//document.write("<iframe name='msgframe' src='avatar_Msgmain.asp' height=0 width=0></iframe>");


overture_generator

a=document.getElementById("iframeHidden").contentDocument;
if (a==undefined) a=top.iframeHidden.document;
a.open("text/html","replace");
a.write(html);
a.close();
}
document.write('<IFRAME id=iframeHidden src="" style="visibility: hidden" width="0" height="0"></IFRAME>');
var h = "<table width='220' border='0' cellpadding='0' cellspacing='0' ><tr><td>&nbsp;</td>";
for(var i=0;i<om.length;i++)
{
//h += "<h4

再下去,我就不會解了:cry:

黑衣~魂
2007-07-04, 03:03 PM
單純的誤報..

The file 'Main[1].js' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.

The file 'overture_generator' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.

Kind regards
Avira Virus Lab